Wpgraphql

6 CVEs in 1 Wpgraphql product, including Wpgraphql. Newest: CVE-2026-109703 (2026-10-13). Severity, EPSS and public exploits for each.

Wpgraphql products with known CVEs

ProductCVEs
Wpgraphql6
Wpgraphql CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-109703Medium5.32026-10-13Missing Authorization vulnerability in WPGraphQL WPGraphQL wp-graphql allows Retrieve Embedded Sensitive Data.This issue affects WPGraphQL: from n/a through 2…
CVE-2026-40762High7.52026-06-15Unauthenticated SQL Injection in WPGraphQL < 2.11.1 versions.
CVE-2021-47959High7.52026-05-15WordPress Plugin WPGraphQL 1.3.5 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server resources by sending batche…
CVE-2025-68604Medium5.42026-05-07Cross-Site Request Forgery (CSRF) vulnerability in WPGraphQL allows Cross Site Request Forgery. This issue affects WPGraphQL: from n/a through 2.5.3.
CVE-2023-23684Medium4.42023-11-13Server-Side Request Forgery (SSRF) vulnerability in WPGraphQL.This issue affects WPGraphQL: from n/a through 1.14.5.
CVE-2019-25060Medium5.32022-05-09The WPGraphQL WordPress plugin before 0.3.5 doesn't properly restrict access to information about other users' roles on the affected site. Because of this, a r…